This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft File: p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft (raw, json) Hash identifier: tcnoLkHAO3ZUWEM9H6s9Hb4Pa0ElrfFXOm4SZ+rReco= Subject key identifier: 1B:6D:75:C5:20:FD:30:58:D1:62:E7:FF:6D:31:88:29:E7:01:8F:07 Authority key identifier: A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C Certificate issuer: /CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c Certificate serial: 019C420FFCF3CDD82651FD8D39DCF5793DCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft Manifest number: 0D Signing time: Mon 09 Feb 2026 11:01:09 +0000 Manifest this update: Mon 09 Feb 2026 11:01:09 +0000 Manifest next update: Tue 10 Feb 2026 11:01:09 +0000 Files and hashes: 1: F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa (hash: fsVPNfzwVtcxP1d7ng53S1s+p3QUE/oW7iQYmnK5p84=) 2: p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl (hash: RY85cAFNeum02DH0C9dcDcAK0gLyt0VejE7LNgiuj5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:fc:f3:cd:d8:26:51:fd:8d:39:dc:f5:79:3d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c Validity Not Before: Feb 9 11:01:09 2026 GMT Not After : Feb 10 11:01:09 2026 GMT Subject: CN=1b6d75c520fd3058d162e7ff6d318829e7018f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:0c:36:6a:50:d7:95:e0:4b:59:87:bf:0e: 2c:44:18:c3:22:f4:81:9e:a8:29:33:19:15:9c:b0: 16:4c:18:6b:e3:b1:e9:69:0a:72:e5:a8:f6:3f:36: 21:f0:31:89:b3:09:cf:24:06:75:92:40:f0:7d:92: 04:97:e9:54:e2:4b:a4:87:9b:c4:6a:5f:6d:be:43: cb:d3:71:30:cf:bd:4b:d0:c9:40:9d:58:d5:bd:fa: 17:d4:49:bd:2d:79:0f:16:85:73:ba:c5:05:53:1d: 68:2f:64:05:41:eb:d8:5f:49:e1:6f:0c:fe:fc:4c: a6:7b:2d:fb:5e:aa:57:9d:05:94:6e:7f:38:b5:b0: 08:ab:9f:b7:8e:de:e2:3a:c7:31:69:ca:d7:d8:8d: e7:6e:03:93:8c:e8:6d:5e:60:57:b6:5e:95:8f:9a: 55:8d:81:7b:0f:2c:e4:02:25:48:c2:f2:de:ff:8a: 0c:4e:a1:70:be:6e:97:71:77:f2:a3:57:c7:b3:5a: 6f:c1:c1:5c:ed:48:a3:48:b0:0e:d8:d9:a8:d4:9e: bc:5f:a4:70:03:47:a0:92:28:11:21:96:8f:7e:fa: 2c:56:58:e4:60:72:dc:66:6c:93:b8:8e:6f:64:42: d1:91:9a:7a:3a:e9:8d:85:a4:11:a9:65:3a:16:9d: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6D:75:C5:20:FD:30:58:D1:62:E7:FF:6D:31:88:29:E7:01:8F:07 X509v3 Authority Key Identifier: keyid:A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:20:d5:96:07:82:8b:a3:a4:85:2c:25:a1:86:e8:ba:2e:ab: 24:0e:b9:cc:a8:ef:2b:19:f2:25:a7:52:47:1f:9a:5a:2e:cb: 99:86:36:4b:88:0f:e6:0f:db:a2:15:71:2a:a2:c0:25:38:17: 90:98:9a:7b:71:10:e8:78:7c:92:a9:b0:32:e4:3c:d5:60:3c: e0:1a:7a:9d:23:2e:1e:59:90:da:02:de:77:cf:5f:f2:2e:5a: 07:ee:d1:3f:7a:50:1a:92:e0:7b:9f:c4:c4:f7:e7:71:cd:b2: c1:f2:ca:45:24:04:df:de:fb:7f:d8:00:e5:fe:ff:53:9c:17: 41:f5:c2:4c:da:29:e4:f6:7d:cf:fe:4c:5e:ab:40:e4:f9:46: 59:b2:78:73:bf:7c:94:fe:f9:25:7b:26:4a:30:de:23:c9:4d: 6d:ac:27:2e:80:ef:74:f4:b7:1f:04:c3:b2:05:ab:8e:16:f7: 2b:69:4f:2a:0f:24:39:70:25:54:48:ec:32:2e:3d:15:77:d8: b6:ed:82:b3:dc:58:fa:b5:c0:43:40:5c:9f:72:f7:1d:4d:0a: f5:4a:74:83:ea:32:f9:c4:f5:71:78:a6:10:f4:3a:79:08:16: a4:8d:4d:29:c2:7d:47:08:49:2e:07:54:0c:5f:f5:b4:19:11: c0:b3:e3:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/zzzdgmUf2NOdz1eT3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YjQ4N2JlNGYyN2M5MWFlMzJhMTdiYTJkZWQ2N2MzZDUx NTNkM2MwHhcNMjYwMjA5MTEwMTA5WhcNMjYwMjEwMTEwMTA5WjAzMTEwLwYDVQQD EygxYjZkNzVjNTIwZmQzMDU4ZDE2MmU3ZmY2ZDMxODgyOWU3MDE4ZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy78MNmpQ15XgS1mHvw4sRBjDIvSB nqgpMxkVnLAWTBhr47HpaQpy5aj2PzYh8DGJswnPJAZ1kkDwfZIEl+lU4kukh5vE al9tvkPL03Ewz71L0MlAnVjVvfoX1Em9LXkPFoVzusUFUx1oL2QFQevYX0nhbwz+ /Eymey37XqpXnQWUbn84tbAIq5+3jt7iOscxacrX2I3nbgOTjOhtXmBXtl6Vj5pV jYF7DyzkAiVIwvLe/4oMTqFwvm6XcXfyo1fHs1pvwcFc7UijSLAO2Nmo1J68X6Rw A0egkigRIZaPfvosVljkYHLcZmyTuI5vZELRkZp6OumNhaQRqWU6Fp2WJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBttdcUg/TBY0WLn/20xiCnnAY8HMB8GA1UdIwQY MBaAFKe0h75PJ8ka4yoXui3tZ8PVFT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDdTSHZrOG55UnJqS2hlNkxlMW53OVVWUFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTRhZTctM2U4My00Y2U5LWE5ZjMt ODZiZGJmNzkwMTIxLzEvcDdTSHZrOG55UnJqS2hlNkxlMW53OVVWUFR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zYTRhZTctM2U4My00Y2U5LWE5ZjMtODZiZGJmNzkwMTIx LzEvcDdTSHZrOG55UnJqS2hlNkxlMW53OVVWUFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyDVlgeC i6OkhSwloYboui6rJA65zKjvKxnyJadSRx+aWi7LmYY2S4gP5g/bohVxKqLAJTgX kJiae3EQ6Hh8kqmwMuQ81WA84Bp6nSMuHlmQ2gLed89f8i5aB+7RP3pQGpLge5/E xPfncc2ywfLKRSQE3977f9gA5f7/U5wXQfXCTNop5PZ9z/5MXqtA5PlGWbJ4c798 lP75JXsmSjDeI8lNbawnLoDvdPS3HwTDsgWrjhb3K2lPKg8kOXAlVEjsMi49FXfY tu2Cs9xY+rXAQ0Bcn3L3HU0K9Up0g+oy+cT1cXimEPQ6eQgWpI1NKcJ9RwhJLgdU DF/1tBkRwLPjww== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:13 2026 by rpki-client